From 900d58fc1731720c324a47695a75ca3862eebaa0 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Sun, 20 Jan 2019 02:21:56 +0000 Subject: Create clawsker.profile --- etc/clawsker.profile | 53 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 etc/clawsker.profile diff --git a/etc/clawsker.profile b/etc/clawsker.profile new file mode 100644 index 000000000..e863a6a45 --- /dev/null +++ b/etc/clawsker.profile @@ -0,0 +1,53 @@ +# Firejail profile for clawsker +# Description: An applet to edit Claws Mail's hidden preferences +# This file is overwritten after every install/update +# Persistent local customizations +include clawsker.local +# Persistent global definitions +include globals.local + +noblacklist ${HOME}/.claws-mail +whitelist ${HOME}/.claws-mail + +# Allow perl (blacklisted by disable-interpreters.inc) +noblacklist ${PATH}/cpan* +noblacklist ${PATH}/core_perl +noblacklist ${PATH}/perl +noblacklist /usr/lib/perl* +noblacklist /usr/share/perl* + +include disable-common.inc +include disable-devel.inc +include disable-interpreters.inc +include disable-passwdmgr.inc +include disable-programs.inc +include whitelist-common.inc + +caps.drop all +net none +no3d +nodbus +nodvd +nogroups +nonewprivs +noroot +nosound +notv +nou2f +novideo +protocol unix +seccomp +shell none + +# disable-mnt +# private +private-bin clawsker,perl +private-cache +private-dev +private-etc fonts +private-lib girepository-1.*,libgirepository-1.*,perl* +private-tmp + +# memory-deny-write-execute - breaks on Arch +noexec ${HOME} +noexec /tmp -- cgit v1.2.3-54-g00ecf